Privacy Analyst

TPI Global Solutions; Montgomery (AL); On-site; USD 90,000 - 130,000; Full time

Job summary

TPI Global Solutions in Montgomery, AL is seeking a Senior Privacy Analyst to support the Agency Privacy Officer in day-to-day privacy operations for Medicaid programs. You will review, track, and document privacy-sensitive requests and incidents involving PHI/PII, ensuring confidentiality and regulatory compliance.

Responsibilities include handling access requests, HIPAA authorizations, subpoenas, privacy incidents, and breach reporting; applying HIPAA rules; and participating in program audits

Qualifications

• Working knowledge of HIPAA Privacy Rule and Breach Notification requirements.
• Knowledge of Medicaid confidentiality requirements, including 42 CFR Part 431, Subpart F.
• Understanding of 42 CFR Part 2 considerations.
• Experience reviewing subpoenas, court orders, HIPAA authorizations, access requests, and privacy incident reports.
• Strong analytical, documentation, compliance, and problem-solving skills.

Responsibilities

• Process and review individual access requests, information-gathering requests, recipient-directed disclosures, HIPAA authorizations, subpoenas and legal requests, privacy complaints, privacy incidents, and breach reporting activities.
• Apply HIPAA Privacy and Breach Notification requirements.
• Ensure compliance with Medicaid confidentiality requirements and regulations.
• Review requests and incidents for privacy risks and compliance concerns.
• Verify identity and authority while adhering to minimum necessary standards.
• Conduct remote and onsite privacy assessments and follow escalation procedures.

Skills

HIPAA Privacy Rule

Privacy by design

Regulatory compliance

Documentation & analysis

Job description

Position Summary

• The Senior Privacy Analyst supports the Agency Privacy Officer in the day-to-day operation of the Agency’s privacy program. Reviews, tracks, coordinates, and documents privacy-sensitive requests and incidents involving Medicaid applicants, recipients, and beneficiaries; claims, eligibility, and enrollment information; provider and program integrity data; PHI; and PII.

Key Responsibilities

• Process and review individual access requests, information-gathering requests, recipient-directed disclosures, HIPAA authorizations, subpoenas and legal requests, privacy complaints, privacy incidents, and breach reporting activities.
• Apply HIPAA Privacy and Breach Notification requirements.
• Ensure compliance with Medicaid confidentiality requirements and regulations.
• Review requests and incidents for privacy risks and compliance concerns.
• Verify identity and authority while adhering to minimum necessary standards.
• Conduct remote and onsite privacy assessments and follow escalation procedures.

Program Support & Audit Participation

• Assist with development, implementation, maintenance, and documentation of the Agency privacy program.
• Participate in audits conducted by SSA, IRS, HHS, CMS, OCR, State Examiner’s Board, and other oversight agencies.

Knowledge, Skills & Abilities

• Working knowledge of HIPAA Privacy Rule and Breach Notification requirements.
• Knowledge of Medicaid confidentiality requirements, including 42 CFR Part 431, Subpart F.
• Understanding of 42 CFR Part 2 considerations.
• Experience reviewing subpoenas, court orders, HIPAA authorizations, access requests, and privacy incident reports.
• Strong analytical, documentation, compliance, and problem-solving skills.

Regulatory Knowledge Areas

• HIPAA Privacy Rule
• Medicaid Confidentiality Requirements
• 42 CFR Part 431, Subpart F
• 42 CFR Part 2
• PHI and PII Protection Standards
• Minimum Necessary Standard
• Identity and Authority Verification Requirements